Network Security

Hi,How do I restrict vpn client access to certain servers on the inside network?I can do it using access lists on the inside interface from the Lan servers to the vpn client but how do I restrict access the other way?Sample:VPN Client 10.10.10.1Lan ...

Hi,A quick question does PIX 501-unlimited can createsite-to-site VPN tunnels. As i found this thread saying no. http://www.tek-tips.com/viewthread.cfm?qid=1004408&page=1Below is the scenario: Cisco 501-Unlimited (Dallas, TX)[HQ] ...

I have a pix 501 configured with static nats similiar to this:static (inside,outside) 123.123.123.1 192.168.123.1static (inside,outside) 123.123.123.2 192.168.123.2These two servers are mail servers. If one mail server needs to send mail to the othe...

Does anyone know where to find the database layout of the SQL/MSDE database backend to the VMS/CSA software? I am looking to build some custom reporting on the data gathered by this product and figured it would be a lot easier to do if someone has al...

Hi all,I have a pix 501 ver 6.3(4), I need help migrating away from the now obsolete alias command.The situation is like this:I have two internal hosts both with external addresses provided by PIX static commands, these hosts need to access certain i...

I am trying to find out whether it is possible for a external client who is connected to our network via a PPTP VPN on our Cisco PIX 515E [version 6.3(3)] Firewall can utilise an SSL connection with ....1. an SSL enabled web site2. an SSL enabled Cit...

I recently had to rebuild my Cisco IDS Event Viewer installation on my Windows XP machine. I've never had a problem running it before, but today it wouldn't run. So, I uninstalled, did two cold re-boots, and re-installed. It gave a message at the ...

Hi All,I have been trying to setup a test VPN connection from my Home DSL to the Cisco 2610 Router here at office running IOS versionIOS (tm) C2600 Software (C2600-IK9O3S-M), Version 12.2(21a)I have read that I need to use crypto isakmp client config...

Hi,I have one 4215 IDS with 5 sensor interfaces. It is managed and moitored by VMS 2.2.I want to put different rules for different interfaces. ie different levels of signature tuning and different types of action on attacks on each interfae. Is it po...

If I:1.In "Security Monitor" - "Data Management" - "Database" - "Rules" specify a trigger condition "Notify via e-mail" and set the trigger action "Total IDS events in database exceed" to 50000 2.Then in the "Security Monitor" - "Monitor" - "Events" ...

Hello,I don't know how to monitor all vlan 5 traffic if i have two switches (3550). I have only one IDS so I can have only one monitor session destination. If I do monitor session 1 source vlan 5 rx , than I can't add another session 1 with source r...

I want to setup a server in our company so we can receive the logs from both or pix firewalls. I am not very satisfied with the documentation I found online. I would appretiate comments or advice as to how to set this up successfully?Many thanks, Mar...

On the 4210 I keep getting a message when saving my changes in IDM, that the virtialSensor will not accept my changes. Has anyone else seen this and if so, what is the cause?ThanksBC

Hi all,Does the PIX 'static' command use a shortest-match-first rule, in a similar way to route table lookups?For example is this a valid configurattion for two-way static:----------------SNIP-------------------static (DMZ,outside) 10.11.1.0 10.11.1....